Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3715.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-08-09T21:00:00
Updated: 2024-08-07T14:53:54.883Z
Reserved: 2007-08-09T00:00:00
Link: CVE-2007-4289
Vulnrichment
No data.
NVD
Status : Modified
Published: 2007-08-09T21:17:00.000
Modified: 2018-10-15T21:34:19.603
Link: CVE-2007-4289
Redhat
No data.